Symantec-impersonating binary (symantec.exe) drops PoisonX driver

Detects a malicious binary masquerading as a Symantec executable (symantec.exe) staged in the user's Music directory. The rule triggers on a known file hash or the combination of the specific filename and file path, indicative of a dropper attempting to install the PoisonX kernel driver.